Plex users urged to patch media servers following exploit chain release

Attackers are targeting unpatched Plex media servers using a complex exploit chain that links four separate vulnerabilities, Ars Technica reported. The issue allows unauthorized individuals to execute arbitrary code on vulnerable systems. [1][2]

According to Ars Technica, the security researcher who discovered the flaws submitted the proof-of-concept exploit chain directly to Plex during a bug report. The attack process requires multiple stages, beginning with an unauthenticated server-side request forgery and a loopback pivot. The exploit then carries out security token theft, delivers a malicious payload, and executes it on the target system. [1]

The researcher explained that artificial intelligence tools were used heavily to assist in developing the exploit chain, Ars Technica reported. The researcher clarified that the process required hours of manual work, judgment calls, and reprioritization, but noted that artificial intelligence significantly sped up the overall research process. [1]